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SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 
OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30 


T. REQUISITION NO. 
116-14-3-4605-0019 
116-545878 
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2. CONTRACT NO. 3, AWARDIEFFECTIVE DATE 


See block 31c. 


GS-10F-0118s 


4. ORDER NO. 


VA118-14-F-0268 


5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE 


a. NAME 
Matthew Truex 


7. FOR SOLICITATION 
INFORMATION CALL: 


b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL 
732-440-9650 TME 


9. ISSUED BY CODE 
Department of Veterans Affairs 


10. THIS ACQUISITION IS 


[X UNRESTRICTEDOR | SET ASIDE: % FOR: 
[> WOMEN-OWNED SMALL BUSINESS 


‘SMALL BUSINESS 
Office of Acquisition Operations zz — (WOSB) ELIGIBLE UNDER THE WOMEN-OWNED 
Technology Acquisition Center HUBZONE SMALL SMALL BUSINESS PROGRAM Nas; 541611 
23 Christopher Way = BUSINESS Z Eowose 
Eatontown NJ 07724 [M SERVICE-DISABLED (oy) 

— VETERAN-OWNED = 
‘SMALL BUSINESS sia) 
11. DELIVERY FOR FOB DESTINA- 12. DISCOUNT TERMS a 13b. RATING 
TION UNLESS BLOCK 1S T 13a THis CONTRACT IS A N/K 
RATED ORDER UNDER, 


‘SEE SCHEDULE 


DPAS (15 CFR 700) 


14. METHOD OF SOLICITATION __ 
RFQ FB X RFP 


15. DELIVER TO CODE 


See Delivery Schedule 


16. ADMINISTERED BY 


CODE 


Department of Veterans Affairs 


Office of Acquisition Operations 
Technology Acquisition Center 
23 Christopher Way 

Eatontown NJ 07724 


17a. CONTRACTORIOFFEROR CODE |438P1 FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE 


MCKINSEY & COMPANY, INC. WASHINGTON D.C. 


Department of Veterans Affairs 
Technology Acquisition Center 
Financial Services Center 

PO Box 149971 

Austin TX 78714-8971 


1200 19TH ST NW STE 1100 


WASHINGTON DC 200362412 
_TELEPH( 


DUNS:825229318 DUNS+4: 


[_] 17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 


19. 20. 21. 22. 23. 24, 
ITEM NO, ‘SCHEDULE OF SUPPLIES/SERVICES, ‘QUANTITY UNIT AMOUNT 


This Order is issued for a study and analysis of VA Office 
of Information and Technology's Services Delivery and 
Engineering Enterprise Operations Data Center operations. 
See Section B.3 for a list of deliverables. 


Work shall be performed in accordance with the Performance 
Work Statement (PWS) located in Section B.4. 


This is a Firm-Fixed Price Order with a period of 
performance of three months. 


Terms and conditions of the Offeror's GSA MOBIS Schedule 
contract shall apply to this Order. 


IFCAP Purchase Order Number for Billing: 116-545878 


POC: Matthew Truex, matthew.truex@va.gov, 732.440.9650 


(Use Reverse and/or Attach Additional Sheets as Necessary) 


25. ACCOUNTING AND APPROPRIATION DATA 
116-3640167-4605-197100-2510 T0G234505 


|__ 27a, SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4, FAR 52.212-3 AND 52.2125 ARE ATTACHED. ADDENDA ARE 


ARE NOT ATTACHED, 


[x 270. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212.5 IS ATTACHED. ADDENDA ARE |X ARE NOT ATTACHED 


X 28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN 1 29. AWARD OF CONTRACT: REF. a OFFER 
— COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND — pated YOUR OFFER ON SOLICITATION 
DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5). INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE 
ONDITIONS SPECIFIED ET FORTH HEREIN IS ACCEPTED AS TO (TEMS 


(0X6) 


Stat ch-Nostant, Dand 
1408.25 13:40:50 0400 
31c. DATE SIGNED 


6/25/2014 


[M1449 (REV. 2/2012) 
Presenbed By GSA FAR (48 CFR) 53.212 


AUTHORIZED FOR LOCAL REPRODUCTION 
PREVIOUS EDITION IS NOT USABLE 
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mandated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA); 45 CFR Parts 160 and 164, 
Subparts A and E, the Standards for Privacy of Individually Identifiable Health Information (“Privacy Rule”); and 45 CFR 
Parts 160 and 164, Subparts A and C, the Security Standard (“Security Rule”). Pursuant to the Privacy and Security 
Rules, the Contractor must agree in writing to certain mandatory provisions regarding the use and disclosure of PHI and 


EPHI. 


1. The Contractor will have access to some privileged and confidential materials of VA. These printed and 
electronic documents are for internal use only, are not to be copied or released without permission, and 
remain the sole property of VA. Some of these materials are protected by the Privacy Act of 1974 (revised 
by PL 93-5791) and Title 38. Unauthorized disclosure of Privacy Act or Title 38 covered materials is a 
criminal offense. 


2. The VA Contracting Officer will be the sole authorized official to release in writing, any data, draft 


deliverables, final deliverables, or any other written or printed materials pertaining to this contract. The 
Contractor shall release no information. Any request for information relating to this contract presented to the 
Contractor shall be submitted to the VA Contracting Officer for response. 

3. Contractor personnel recognize that in the performance of this effort, Contractor personnel may receive or 
have access to sensitive information, including information provided on a proprietary basis by carriers, 
equipment manufacturers and other private or public entities. Contractor personnel agree to safeguard such 
information and use the information exclusively in the performance of this contract. Contractor shall follow 
all VA rules and regulations regarding information security to prevent disclosure of sensitive information to 
unauthorized individuals or organizations as enumerated in this section and elsewhere in this Contract and its 
subparts and appendices. 


4. Contractor shall limit access to the minimum number of personnel necessary for contract performance for all 


information considered sensitive or proprietary in nature. If the Contractor is uncertain of the sensitivity of 
any information obtained during the performance this contract, the Contractor has a responsibility to ask the 
VA Contracting Officer. 


5. Contractor shall train all of their employees involved in the performance of this contract on their roles and 


responsibilities for proper handling and nondisclosure of sensitive VA or proprietary 

information. Contractor personnel shall not engage in any other action, venture or employment wherein 
sensitive information shall be used for the profit of any party other than those furnishing the information. 
The sensitive information transferred, generated, transmitted, or stored herein is for VA benefit and 
ownership alone. 

6. Contractor shall maintain physical security at all facilities housing the activities performed under this 
contract, including any Contractor facilities according to VA-approved guidelines and directives. The 
Contractor shall ensure that security procedures are defined and enforced to ensure all personnel who are 
provided access to patient data must comply with published procedures to protect the privacy and 
confidentiality of such information as required by VA. 

7. Contractor must adhere to the following: 

a. The use of “thumb drives” or any other medium for transport of information is expressly prohibited. 

b. Controlled access to system and security software and documentation. 

c. Recording, monitoring, and control of passwords and privileges. 

d. All terminated personnel are denied physical and electronic access to all data, program listings, data 
processing equipment and systems. 

e. VA, as well as any Contractor (or Subcontractor) systems used to support development, provide the 
capability to cancel immediately all access privileges and authorizations upon employee 
termination. 

f. Contractor PM and VA PM are informed within twenty-four (24) hours of any employee 
termination. 

g. Acquisition sensitive information shall be marked "Acquisition Sensitive" and shall be handled as 
"For Official Use Only (FOUO)". 

h. Contractor does not require access to classified data. 

8. Regulatory standard of conduct governs all personnel directly and indirectly involved in procurements. All 
personnel engaged in procurement and related activities shall conduct business in a manner above reproach 
and, except as authorized by statute or regulation, with complete impartiality and with preferential treatment 
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for none. The 


9. VA Form 0752 shall be completed by all Contractor employees working on this contract, and shall be 
provided to the CO before any work is performed. In the case that Contractor personnel are replaced in the 
future, their replacements shall complete VA Form 0752 prior to beginning work. 
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(c) Include the substance of this clause, including this paragraph (c), in all subcontracts with small business concerns, 
including subcontracts with small business concerns for the acquisition of commercial items. 


(End of Clause) 


C.4 VAAR 852.203-70 COMMERCIAL ADVERTISING (JAN 2008) 

The bidder or offeror agrees that if a contract is awarded to him/her, as a result of this solicitation, he/she will not 
advertise the award of the contract in his/her commercial advertising in such a manner as to state or imply that the 
Department of Veterans Affairs endorses a product, project or commercial line of endeavor. 


(End of Clause) 


C.5 VAAR 852.203-71 DISPLAY OF DEPARTMENT OF VETERAN AFFAIRS HOTLINE 
POSTER (DEC 1992) 

(a) Except as provided in paragraph (c) below, the Contractor shall display prominently, in common work areas within 
business segments performing work under VA contracts, Department of Veterans Affairs Hotline posters prepared by the 
VA Office of Inspector General. 


(b) Department of Veterans Affairs Hotline posters may be obtained from the VA Office of Inspector General (53E), 
P.O. Box 34647, Washington, DC 20043-4647. 


(c) The Contractor need not comply with paragraph (a) above if the Contractor has established a mechanism, such as a 
hotline, by which employees may report suspected instances of improper conduct, and instructions that encourage 
employees to make such reports. 


(End of Clause) 


C.6 ORGANIZATIONAL CONFLICT OF INTEREST 


(a) Definition. Per FAR 2.101, an “organizational conflict of interest means that because of other activities or 
relationships with other persons, a person is unable or potentially unable to render impartial assistance or advice to the 
Government, or the person’s objectivity in performing the contract work is or might be otherwise impaired, or a person 
has an unfair competitive advantage.” It does not include the normal flow of benefits from incumbency. 


(b) The Contracting Officer has determined that potentially significant organizational conflicts of interest may arise due to 
the nature of the work the Contractor will perform under this order and that may preclude the Contractor from being 
awarded future Service Delivery and Engineering (SDE) Enterprise Operations (EO) Data Center contracts/orders in a 
related area. Whereas the Contractor has agreed to undertake this order to provide a study and analysis of SDE EO Data 
Center and Franchise Fund operations, it is agreed that the Contractor may be ineligible to act as a prime contractor, 
consultant, or subcontractor to any prime contractor or subcontractor at any tier which is to supply the services, system or 
major components thereof for any project where the Contractor has provided or is providing support as described in FAR 
9.505-1 through 9.505-4. The Contracting Officer may make a determination to allow a company to participate in an 
acquisition subject to the submission of an acceptable mitigation plan in accordance with paragraph (d) and (e) 

below. This determination may not be appealed. 


(c) If the Contracting Officer requests, and the Contractor submits an organizational conflict of interest mitigation plan 
that, after Government review is acceptable to the Government, the Contractor’s parent corporation, subsidiaries, or other 
physically separate profit and loss centers may not be precluded from acting as a subcontractor or consultant on future 
SDE EO Data Center contracts/orders. The Government's determination regarding the adequacy of the mitigation plan or 
the possibility of mitigation are unilateral decisions made solely at the discretion of the Government and are not subject to 
the Disputes clause of the contract/order. The Government may terminate the contract/order for default if the Contractor 
fails to implement and follow the procedures contained in any approved mitigation plan. 
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(d) This clause/restriction shall remain in effect for one (1) year after completion of all tasks performed under this order. 


(e) The Contractor shall apply this clause to any subcontractors or consultants, who have access to information, participate 
in the development of data, or participate in any other activity related to this order which is subject to terms of this clause 
at the prime contractor level, unless the Contractor includes an acceptable alternate subcontractor provision in its 
mitigation plan. For subcontractors or consultants under this order, if an organizational conflict of interest mitigation plan 
is submitted and acceptable to the Government, the subcontractor’s parent corporation, subsidiaries, or other physically 
separate profit and loss centers may not be precluded from acting as a prime, subcontractor, or consultant on future SDE 
EO Data Center contracts/orders. 


(f) The Contractor’s employees shall be trained and informed of Subcontract 9.5 of the FAR and this contract provision, 
and shall execute a “Contractor-Employee Personal Financial Interest/Protection of Sensitive Information” Agreement as 
appropriate. 


(g) The Contactor agrees that it will use all reasonable diligence in protecting proprietary data received by it. The 
Contractor further agrees it will not willfully disclose proprietary data to unauthorized parties without the prior permission 
of the Government, and that proprietary data shall not be duplicated, used or disclosed, in whole or part, for any purpose 
other than to accomplish the contracted effort. This restriction does not limit the contractors right to use, duplicate or 
disclose such information if such information was lawfully obtained by the contractor from other sources. 


(h) The Contractor agrees to enter into written agreements with all companies whose proprietary data he/she shall have 
access and to protect such data from unauthorized use or disclosure as long as it remains proprietary. The Contractor shall 
furnish to the Contracting Officer copies of these written agreements. The Contractor agrees to protect the proprietary 
data and rights of other organizations disclosed to the Contractor during performance of this contract with the same 
caution that a reasonably prudent Contractor would use to safeguard highly valuable property. The Contractor agrees to 
refrain from using proprietary information for any purpose other than that for which it was furnished. 


(i) The Contractor shall not distribute reports, data or information of any nature arising from its performance under this 
contract, except as provided by contract or as may be directed by the Contracting Officer. 


ces inonde ia insur Date anaco AIEEE M 1) ccc 


(1) The Government may waive application of this clause when it is determined to be in the best interest of the 
Government to do so. 


(End of Provision) 


C.7 VAAR 852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (NOV 2012) 


(a) Definitions. As used in this clause— 
(1) Contract financing payment has the meaning given in FAR 32.001. 


(2) Designated agency office has the meaning given in 5 CFR 1315.2(m). 
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